diff --git a/python312.changes b/python312.changes
index d148cbe..f594f2c 100644
--- a/python312.changes
+++ b/python312.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Mar  6 14:13:58 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Use the system-wide crypto-policies [bsc#1211301]
+  * Use the system default cipher list instead of hardcoded values
+  * Add the --with-ssl-default-suites=openssl configure option
+
 -------------------------------------------------------------------
 Fri Feb 23 01:06:42 UTC 2024 - Matej Cepl <mcepl@suse.com>
 
diff --git a/python312.spec b/python312.spec
index 2efc117..2439ca1 100644
--- a/python312.spec
+++ b/python312.spec
@@ -493,6 +493,9 @@ export CFLAGS="%{optflags} -IVendor/"
     --with-system-ffi \
     --with-system-expat \
     --with-lto \
+%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150400
+    --with-ssl-default-suites=openssl \
+%endif
 %if %{with profileopt}
     --enable-optimizations \
 %endif